CVE-2016-2167
moderate-risk
Published 2016-05-05
The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repository realm string.
Do I need to act?
-
0.97% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.8/10
Medium
NETWORK
/ HIGH complexity
Affected Products (5)
Affected Vendors
References (24)
Vendor Advisory
http://subversion.apache.org/security/CVE-2016-2167-advisory.txt
Vendor Advisory
http://subversion.apache.org/security/CVE-2016-2167-advisory.txt
and 4 more references
36
/ 100
moderate-risk
Severity
21/34 · High
Exploitability
3/34 · Minimal
Exposure
12/34 · Low